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1„ A method of identification control of persons, 
comprising a phase of generating a unique means of 
5 identification (29, 56, 84, 98, 103, 111) 

associated with at. least one person (22, 4 7 , 78, 
9.3, 107, 113) comprising the following steps: 
/a/ detecting biometric data (23, 48, 79, 94, 108) 
relating to said person; 
10 /b/ searching for a match between the biometric 

data relating to said person and biometric data 
previously stored in a biometric database (26, 51, 

83, 97, 110), said previously stored biometric data 
relating to persons for which means of 

15 identification have been previously generated; and, 

when no match has been found: 

/c/ generating a means of identification (29, 56, 

84, 98, 103, 111) associated with said person from 
biometric data relating to said person and at 

20 least one identity (24, 49, 80, 95, 117) of said 

per son , 

2., The method as claimed in claim 1, comprising 
furthermore the step: 
25 /d/ adding the biometric data relating to said 

person to the biometric database. 

3. The method as claimed in claim 2, in which, during 
step /d/, the biometric data (48, 79) are added to 
30 the biometric database (51, 83) in association 

with a unique identifier of said means of 
identification {56, 84) associated with said 
person (4 7, 78) „ 

35 4,, The method as claimed in one of the preceding 

claims, furthermore comprising a step of 

verification (27, 52, 87, 100, 118) of the 

identity of said person (22, 47, 78, 9.3, 113) . 



The method as claimed in claim 4, in which the 
verification of the identity is reinforced for a 
person for which a match has been found in step 
/b/., 

The method as claimed in any one of the preceding 
claims, in which the generation, in step /c/, of a 
means of identification associated with said 
person (10 7) is performed firstly from biometric 
data (108) relating to said person, then 
supplemented with the addition of at least one 
identity (117) of said person, 

The method as claimed in any one of the preceding 
claims, in which the phase of generating a unique 
means of identification (84, 98, 103) associated 
with said person {78, 93) furthermore comprises 
the following steps: 

- calculating a key associated with said person, 
the key being able to take a much smaller number 
of values than the number of persons apt to 
require the generation of a unique means of 
identification, and high enough for any two 
persons to be associated with different keys, 
with a predetermined level of probability; and 

- storing said key in a database of the identities 
(89, 101) in association with an identity of 
said person. 

The method as claimed in claim 7, in which the 
number of values of the key is chosen in such a 
way as to take account of the calculational power 
necessary to calculate all the combinations by 
brute force,. 

The method as claimed in claim 7 or 8, in which 
the number of values of the key lies substantially 
between a few tens and a few hundreds when the 



number of persons apt to require the generation of 
a unique means of identification is a few million 
or tens of millions,, 

The method as claimed in any one of claims 7 to 9, 
in which the calculation of the key is performed 
from biometric data relating to said person (78).. 

The method as claimed in claim 10, in which the 
calculation of the key is performed from the 
general form of the prints of certain fingers at 
least of said person. 

The method as claimed in claim 10 or 11, in which 
the calculation of the key is performed from 
information relating to the iris of the eye of 
said person., 

The method as claimed in any one of claims 10 to 
12, comprising the following steps, when a match 
has been found in step /b/: 

- obtaining an identity (80) of said person (78); 

- calculating the key (81) associated with said 
person; 

- comparing the calculated key with the key stored 
in the database of identities {89} in 
association with the identity obtained for said 
person; and 

- selectively implementing step /c/ as a function 
of the result of the comparison between said 
calculated and stored keys, 

The method as claimed in any one of claims 7 to 9, 
in which the calculation of the key is random, 

The method as claimed in claim 14, in which 

moreover the key is stored in the biometric 

database (97) in association with the biometric 
data relating to said person (93) 
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The method as claimed in claim 15, comprising the 
following steps, when a match has been found in 
step /b/: 

- obtaining an identity (95) of said person {93); 

- obtaining the key stored in the biometric 
database (9 7) in association with the biometric 
data relating to said person; 

- comparing the key obtained with the key stored 
in the database of identifies (101) in 
association with the identity obtained for said 
person; and 

- selectively implementing step /c/ as a function 
of the result of the comparison between said 
keys „ 

The method as claimed in any one of the preceding 
claims, furthermore comprising a second phase of 
granting at least one entitlement to said person 
(31, 39, 59, 69), in which: 

/e/ said person identifies themselves with the aid 
of the means of identification (33, 41, 61, 71) 
which has been previously associated therewith; 
and 

/f/ said entitlement is granted to said person 
when said entitlement has not already been granted 
to said person a number of times equal to a 
predetermined number 

The method as claimed in claim 17, in which step 
/e/ comprises a comparison between biometric data 
(32, 40, 60, 70) relating to said person and the 
biometric data from which the means of 
identification associated with said person has 
been generated. 

The method as claimed in claim 17 or 18, in which 
step /f/ comprises the consultation, in a database 
of entitlements ( 37, 45, 67, 76), of the 



entitlements already granted to persons, on the 
basis of an identifier (35, 43, 65).. 

The method as claimed in claim 19, in which said 
identifier (35, 65) is an identity of said person, 
obtained from the means of identification (33, 61) 
associated with said person (31, 59} . 

The method as claimed in claim 19, in which said 
identifier is a unique identifier (43) of the 
means of identification (41) associated with said 
person, this identifier being incorporated into 
said means of identification associated with said 
person (3 9) „ 

The method as claimed in any one of claims 17 to 
21, in which when a match has been found in step 
/b/, the unique identifier of the means of 
identification associated with said person (4 7, 
78) which was stored in the biometric database 
(51, 83) in association with the biometric data 
relating to said person (4 7 , 78 } is added to a 
first list of the identifiers of the revoked means 
of identification (55, 91), and, in which step /f/ 
is selectively implemented depending on whether 
the identifier of the means of identification (61, 
71) with which said person (59, 69} is identified 
is or is not stored in a second list of the 
identifiers of the revoked means of identification 
(64, 74). 

The method as claimed in claim 22, in which the 
phases of generating a unique means of 
identification associated with said person and of 
granting at least one entitlement to said person 
are implemented by a first and a second entity 
respectively, and in which the first list of the 
identifiers of the revoked means of identification 
(55, 91) is stored on a database of the 
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identifiers of the revoked means of identification 
that can be consulted by the second entity, the 
second list of the identifiers of the revoked 
means of identification (64, 74) then being 
identical to the first list of the identifiers of 
the revoked means of identification (55, 91) „ 

The method as claimed in claim 22, in which the 
phases of generating a unique means of 
identification associated with said person and of 
granting at least one entitlement to said person 
are implemented by a first and a second entity 
respectively, and in which the identifiers added 
to the first list of the identifiers of the 
revoked means of identification (55, 91) are 
transmitted from the first entity to the second 
entity to update the second list of the 
identifiers of the revoked means of identification 
(64, 74).. 

The method as claimed in claim 24, in which the 
transmission of the identifiers from the first 
entity to the second entity is performed according 
to at least one of the following mechanisms: by 
periodic transfer of said identifiers added to the 
first list of the identifiers of the revoked means 
of identification (55, 91) since the last 
transfer, or by periodic transfer of the whole set 
of identifiers stored in the first list of the 
identifiers of the revoked means of 
identification, or by instantaneous transfer of 
each identifier upon its addition to the first 
list of the identifiers of the revoked means of 
identif i cat ion „ 

A system (104) comprising means for implementing 
the method as claimed in any one of the preceding 
claims „ 
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27 „ The system (104) as claimed in claim 26, 
comprising a first entity (105) designed to 
implement the first phase of generating a unique 
means of identification (29, 56, 84, 98, 103} 
5 associated with at least one person (22, 47, 78, 

93), and a second entity (106) designed to 
implement the second phase of granting at least 
one entitlement to at. least one person {31, 39, 
59, 69) . 



